Cyber Security Analyst

Equiliem - Fairmont, WV

Full-time

Fairmont, WV

Administrative and Support Services

About the position

The Cyber Security Analyst position at Equiliem is a critical role within the Security Operations Center (SOC) dedicated to supporting the National Oceanic and Atmospheric Administration (NOAA). This position is based in Fairmont, WV or Boulder, CO, and requires an ACTIVE Top Secret security clearance. The SOC team consists of 20 analysts who operate 24/7, ensuring the security and integrity of NOAA's information systems. As a Cyber Analyst, you will be responsible for monitoring, detecting, and responding to security incidents, as well as performing in-depth analysis of anomalous behavior based on various data sources including firewalls, packet captures, and intrusion detection systems. In this role, you will be expected to adhere to established operational rhythms and standards, contributing to the overall effectiveness of the SOC. You will handle incidents directly, interfacing with customers and management to ensure timely and effective responses. Your analytical skills will be put to the test as you investigate potential security threats and escalate issues according to established protocols and service level agreements (SLAs). Additionally, you will have the opportunity to mentor and teach junior analysts, fostering a collaborative and knowledgeable team environment. The position also involves identifying areas for improvement within SOC processes and tools, allowing you to contribute to the enhancement of the mission. Your expertise in cybersecurity technologies and incident management will be crucial in maintaining the security posture of NOAA's operations.

Responsibilities

• Perform against established operational rhythm, expectations and standards for Security Operations Center (SOC) analysts
• Support shift coverage as part of the 24x7 operations of the NOAA SOC
• Handle incidents with direct interface to customers and management team
• Analyze anomalous behavior based on log data from firewalls, packet capture, web proxy services, network flow analysis, intrusion detection, and malware analysis tools
• Investigate and escalate incidents in accordance with protocols and contractual SLAs
• Identify areas of improvement for SOC processes and tools to enhance the mission
• Provide teaching and mentoring to junior analysts

Requirements

• Requires BS degree and 4+ years of prior relevant experience
• Prior experience performing as a SOC analyst
• Working knowledge of SIEM solutions and incident management solutions
• Technical understanding of core cybersecurity technologies and emerging capabilities
• Strong analytical and troubleshooting skills
• CEH, GCIH, or relevant IT technology certification
• Examples of other certifications include CERT Certified Computer Security Incident Handler, ECC CEH, GCIH, GISF, CISSP, and equivalent certifications may also be considered.

Nice-to-haves

• Hands-on cybersecurity experience
• Demonstrated understanding of the life cycle of cybersecurity threats, attacks, attack vector, and methods of exploitation
• Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework
• Familiarity with Cloud concepts and experience performing monitoring and responding to threats in Cloud environments
• Familiarity with the NOAA mission